7 Commits

Author	SHA1	Message	Date
Preston Van Loon	c1197d7881	Add static analysis for unsafe uint casting (#10318) ... * Add static analysis for unsafe uint casting * Fix violations of uintcast * go mod tidy * Add exclusion to nogo for darwin build * Add test for math.Int * Move some things to const so they are assured not to exceed int64 * Self review * lint * fix tests * fix test * Add init check for non 64 bit OS * Move new deps from WORKSPACE to deps.bzl * fix bazel build for go analysis runs * Update BUILD.bazel Remove TODO * add math.AddInt method * Add new test casts * Add case where builtin functions and declared functions are covered * Fix new findings * cleanup Co-authored-by: prylabs-bulldozer[bot] <58059840+prylabs-bulldozer[bot]@users.noreply.github.com> Co-authored-by: Nishant Das <nishdas93@gmail.com>	2022-03-11 09:34:30 +00:00
terence tsao	ee5d75732d	Add pkg crypto (#9603) ... * Add pkg crypto * Update go.yml Co-authored-by: prylabs-bulldozer[bot] <58059840+prylabs-bulldozer[bot]@users.noreply.github.com>	2021-09-15 22:55:11 +00:00
Raul Jordan	8122da6c97	Add Gosec Github Action (#9332) ... * add gosec security scan * add gosec ignores first batch * more nosec for exec * add filepath clean * more nosec * file inclusion nosec * build * herumi Co-authored-by: prylabs-bulldozer[bot] <58059840+prylabs-bulldozer[bot]@users.noreply.github.com>	2021-08-15 15:24:13 +00:00
Victor Farazdagi	386b69f473	Fix comments (#8802) ... * fix incorrect exported name in comments * add comments to exported methods	2021-04-23 12:06:05 +00:00
Radosław Kapka	fe9921457c	Fix failing static analyzer tests (#7363) ... * add "want" expectations * add build step with analyzer tests * add colon to yml * Merge refs/heads/master into fix-analyzer-test-expectations * Merge refs/heads/master into fix-analyzer-test-expectations * Merge refs/heads/master into fix-analyzer-test-expectations * Merge refs/heads/master into fix-analyzer-test-expectations * remove tests from CI * readme file * change header size	2020-09-29 11:29:40 +00:00
Ivan Martinez	c69b3f568e	Move hard-coded constants to global consts (#6467) ... * Move hard-coded constants to global consts * Fixes * Merge branch 'master' into remove-hard-constants * Merge refs/heads/master into remove-hard-constants * Merge refs/heads/master into remove-hard-constants * Merge refs/heads/master into remove-hard-constants * Merge refs/heads/master into remove-hard-constants * Comments * Merge refs/heads/master into remove-hard-constants * Merge refs/heads/master into remove-hard-constants * Merge refs/heads/master into remove-hard-constants * Merge refs/heads/master into remove-hard-constants * Merge refs/heads/master into remove-hard-constants * Merge branch 'master' of github.com:prysmaticlabs/prysm into remove-hard-constants	2020-07-03 15:25:32 +00:00
Victor Farazdagi	78465e2549	QSP-6: Enforces crypto-secure PRNGs (#6401) ... * adds cryptorand analyzer * better naming * rely on suffix * sync/pending_* use crypto/rand * define shared/rand * updates fetcher * fixes rand issue in sync package * gofmt * shared/rand: more docs + add exclusion nogo_config.json * updates validator/assignments * updates comment * fixes remaning cases * re-arranges comments * fixes tests * renames in shared/rand API * adds simple no-panic test * gazelle Co-authored-by: prylabs-bulldozer[bot] <58059840+prylabs-bulldozer[bot]@users.noreply.github.com>	2020-06-26 09:58:47 -05:00